Project

General

Profile

Feature #11417

build ceph with hardening flags

Added by Ken Dreyer over 4 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Category:
-
Target version:
Start date:
04/16/2015
Due date:
% Done:

90%

Source:
other
Tags:
Backport:
Reviewed:
Affected Versions:
Pull request ID:

Description

See https://github.com/ceph/ceph/pull/3849 (which was closed)...

In src/Makefile-env.am, we should make the following changes:

  1. add -fPIE in the AM_COMMON_CFLAGS definition
  2. add -pie -Wl,-z,relro -Wl,-z,now to the AM_LDFLAGS definition

History

#1 Updated by Sage Weil over 4 years ago

  • Target version set to v9.0.2

#2 Updated by Ken Dreyer over 4 years ago

  • Assignee set to Siddharth Sharma

#3 Updated by Siddharth Sharma over 4 years ago

  • % Done changed from 0 to 90

Now it builds fine but without rest-bench for x86_64 it just fails at the moment to build that, though for i386 seems the patch build fine http://gitbuilder.sepia.ceph.com/gitbuilder-ceph-deb-trusty-i386-basic/log.cgi?log=d4a741da3039126fb3e5ab85cd9ffb23b7215cfb , need to fix rest-bench build failure with rest-bench.

#4 Updated by Kefu Chai over 4 years ago

  • Status changed from New to Need Review

#5 Updated by Jos Collin over 2 years ago

  • Status changed from Need Review to Resolved

liewegas merged commit 6dd143d into master on 9 Aug 2015

Also available in: Atom PDF